Get ready for security agents: Microsoft Security Copilot will be included in Microsoft 365 E5

Introduction:

Microsoft Security Copilot agents are directly built into the flow of work for security teams in Microsoft Defender, Microsoft Entra, Microsoft Intune and Microsoft Purview. Today, we are introducing a dozen new agents across these products, to bring agentic defense across workflows, enabling adaptive protection.

To make the agents easily accessible and help security teams get started more quickly, we are excited to announce that Security Copilot will be included in your Microsoft 365 E5 plan as part of your core entitlement with no additional cost*. No provisioning or licensing changes are required. Rollout starts today with existing Security Copilot customers with Microsoft 365 E5 and will continue for all Microsoft 365 E5 customers in the upcoming months. 

When this will happen

• Microsoft 365 E5 customers who already have Security Copilot can get started today with this entitlement.
• All other Microsoft 365 E5 customers can get access to Security Copilot as part of a phased rollout in the upcoming months, with notifications sent 30 days prior to activation.

How this affects your organization

Your organization will have access to Security Copilot with:

• 400 security compute units (SCUs)/month for every 1,000 paid users in Microsoft 365 E5 (up to 10,000 SCUs/month across all workspaces). SCU allocation scales based on the number of users in Microsoft 365 E5.
• Core agentic experiences across Microsoft Entra, Microsoft Intune, Microsoft Purview, Microsoft Defender, and the Security Copilot portal
• Developer tools and APIs for custom agents and integrations

What you can do to prepare:

Microsoft 365 E5 customers who already have Security Copilot can get started today with:

• Security operations in Microsoft Defender: https://security.microsoft.com 
• Data security in Microsoft Purview: https://purview.microsoft.com 
• Identity and access in Microsoft Entra: https://entra.microsoft.com 
• Endpoint management in Microsoft Intune: https://intune.microsoft.com 
• Review the documentation for details of what’s included with Security Copilot in Microsoft 365 E5

All other Microsoft 365 E5 customers are encouraged to:

• Review the documentation for details of what’s included with Security Copilot in Microsoft 365 E5
• Explore supported use cases in the Security Copilot Adoption Hub
• Watch for the notification email 30 days prior to activation

*Eligible Microsoft 365 E5 customers will have 400 Security Compute Units (SCUs) per month for every 1,000 user licenses, up to 10,000 SCUs per month. This included capacity is expected to support typical scenarios. Customers will have the option to pay for scaling beyond the allocated amount at a future date at a rate of $6 per SCU on a pay-as-you-go basis. They will receive a 30-day advance notice when this option becomes available. Learn more: Learn about Security Copilot inclusion in Microsoft 365 E5 subscription | Security Copilot | Microsoft Learn